#itsec

Save the date: Saturday October 17th. #OWASP #Ottawa is pleased to announce a day of learning, community, and mentorship to celebrate the 25th Anniversary of the OWASP Foundation and the OWASP Ottawa Chapter’s selection of one of the top chapters in a constellation of over 130 Chapters. This will be a free _and_ ticketed event. Details on tickets, speakers, and other details will be made available soon. For the community. By the community. #OWASPOttawaDay2026 #Security hashtag#appsec #Itsec #Cyber #Cybersecurity

Scherz beiseite, ich benutze natürlich "--ignore-scripts" mit ganz wenigen Ausnahmen und jetzt habe ich entdeckt, dass es seit npm 11 auch eine "min-release-age" Option gibt, mit der man neue Package-Versionen erst mal ein paar Tage abhängen lassen kann. #npm #security #itsec

@shadowwwind@mastodon.social @kkarhan@mastodon.social @gdmalan@infosec.exchange @maddad@mastodon.world @ZoidbergForPresident@kolektiva.social @nakal@mastodon.social @arstechnica@mastodon.social @EUCommission@ec.social-network.europa.eu still doesn't fix the Problem that one needs to support Tech-Illiterates… Claiming 'GrapheneOS is a solution' for the masses is like expecting the average Normie to learn to build their own OpenBSD from scratch before turning on a computer for the first time: Absolutely deranged elitism!And if the masses don't adopt something, one will always stand out! https://mastodon.social/@kkarhan/116996717672902739 #Tech #TechLiteracy #TechIlliterates #GrapheneOS #OpenBSD #ITsec #ComSec #TouchGrass #InfoSec #OpSec #Normies #TechLiterates

«„Uns hackt doch keiner!“ – Der Lieblingssatz deutscher Mittelständler kurz vor dem Incident. […] Cybercrime ist heute ein professionelles, lukratives, skalierbares, zukunftsträchtiges Geschäftsmodell […]» — von @teufelswerk@social.tchncs.de Das Problem ist weltweit, dass zu viele IT-Verantwortlichen nur bis zum Bildschim ihren Blickwinkel haben und kein Stück weiter. 👉 https://teufelswerk.net/uns-hackt-doch-keiner-der-lieblingssatz-deutscher-mittelstaendler-kurz-vor-dem-incident/ #hacking #mittelstand #itsicherheit #kmu #cybercrime #itsec #unternehmen #it #sicherheit #daten #erpressung #zuklein

This will increase a lot of uncertainty in all areas: «Artificial Intelligence — Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks: Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, potentially turning malicious repositories into supply chain attack vectors.» 🤜 https://www.securityweek.com/decades-old-bash-tricks-expose-ai-coding-agents-to-supply-chain-attacks/ #bash #decates #hacking #ai #bypass #itsec #itsecurity #supplychain #aicoding #supplychainattack #gnu #linux #unix #aws

A Theory of Prompt Injection (and why you should study roles) #ai #itsec #itsecurity #promtinjectionhttps://role-confusion.github.io

Teaser in TL: "Microsoft Scout is a new AI personal assistant built on OpenClaw" My head: F* Christ on a rollercoaster. Worst of all worlds in one sentence. #AI #ITSec #ITSecurity #DataProtection #Datenschutz

Let's Encrypt just stopped the issuance of certificates after an "incident": https://letsencrypt.status.io/pages/incident/55957a99e800baa4470002da/69fe2d6698ca07050eb4b1b3 If anyone encounters issues today with failed certificate renewals: It's probably not your setup. #letsencrypt #itsec #devops #linux #security #tls

@libreleah@mas.to nice to see #Wayland getting adopted more. Certainly neither it nor X are the main focus of it, but it's always good to see #OpenBSD not just getting maintenance but improving.I genuinely want OpenBSD to be more successful and force eberyone else to up their game in #ITsec…

@javahippie@mainz.social @koehntopp@infosec.exchange @mewe@todon.eu ändert nix daran dass die #ITsec bei Bundedtag ujd Bundesregierung für'n Arsch ist!

@javahippie@mainz.social ja, nur ist das das geringste Problem der #ITsec ,#InfoSec, #OpSec & #ComSec dort...

Cryptographic Right Answers: Post Quantum and Rust Edition […] Cryptography is everywhere and as a developer you will need to upgrade your projects with post-quantum algorithms, whether because you care about the security of your users, or for compliance reasons. […] 🦀 https://kerkour.com/post-quantum-cryptography-recommendations-rust #rust #cryptography #rustlang #pqc #itsec #itsecurity #security #coding #PQCryptography #postquantum

@javahippie@mainz.social ändert trotzdem nix daran dass @Bundesregierung@social.bund.de miserable #ITsec, #InfoSec, #OpSec & #ComSec haben. Also wirklich miserabel…Und nein ich kann nicht ins Detail gehen. Nacher Ende ich wie Boris "Tron" Floricic…

@markus_netzpolitik@chaos.social @oldperl@mastodon.online am Ende entscheide ich das nicht. @Bundesregierung@social.bund.de & @bsi@social.bund.de steht es ja frei entsprechend Mittel für Planstellen freizuschaufeln damit nicht erst alles bei @certbund@social.bund.de aufschlägt.Gern mach' ich auch nen #Onboarding damit die #ITsec, #InfoSec, #OpSec & #ComSec nicht mehr komplett für die Tonne ist, denn das was ich an #OSINT bisher ohne #NDA rausfinden konnte ist erschreckend!So "@Lilith@chaos.social würde wahrscheinlich untertauchen müssen" - Level…

@evawolfangel@chaos.social I wish they'd get serious #GDPR fines and be forced to reimburse everyone's costs and damages to change these and the harm caused by said #DataBreach. Cuz #LackOfAccountability & #LackOfConsequences embolden companies to not take #ITsec & #InfoSec serious…

It's really a.missed chance by #Samsung that they don't use 123.45.67.89 as their own #DNS resolver & default for their devices. Cuz they actually have that one allocated by #APNIC and #WHOIS literally says it's in #Gangnam! Don't believe me? Look it up! #DNSserver #DNSresolver #Resolvers #GangnamStyle #ITsec #Meme #Memes #IT #Networkin #ItsNeverDNS #ItsAlwaysDNS #itsDNS

Stop running setenforce 0 and pretending SELinux doesn't exist. I wrote a practical guide to actually working with SELinux on Fedora and RHEL: Contexts, booleans, troubleshooting denials, container volume labels, and the commands you'll actually use. No policy theory rabbit holes. Just the stuff that gets you unstuck. https://blog.hofstede.it/selinux-a-practical-guide-for-fedora-and-rhel/ #SELinux #Fedora #RHEL #Linux #sysadmin #infosec #itsec